Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/Ae52YjgarviYUr6ulMwFP6svWho.roa
File: Ae52YjgarviYUr6ulMwFP6svWho.roa (raw, json)
Hash identifier: O+/eKJxiVIPEeqO59x9dfdyHK7ebwfC6u/uFGp3YTj4=
Subject key identifier: 01:EE:76:62:38:1A:AE:F8:98:52:BE:AE:94:CC:05:3F:AB:2F:5A:1A
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A1A2779C00F4B0A40D880FA51399CC90DE
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/Ae52YjgarviYUr6ulMwFP6svWho.roa
Signing time: Tue 03 Nov 2026 17:31:49 +0000
ROA not before: Tue 03 Nov 2026 17:31:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 153.52.94.0/24 maxlen: 24
163.245.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:77:9c:00:f4:b0:a4:0d:88:0f:a5:13:99:cc:90:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Nov 3 17:31:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01ee7662381aaef89852beae94cc053fab2f5a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:17:ae:68:53:9f:07:ca:56:5b:6c:52:fc:
f8:12:44:e4:88:74:10:53:fd:9f:80:1a:8c:69:8f:
52:d0:21:41:14:52:bb:07:e8:c9:6a:dd:55:70:c0:
50:a4:b5:f5:b9:24:23:b3:08:b8:b9:c1:4c:59:b3:
a1:a6:96:99:e1:26:99:bd:27:05:47:cc:38:8c:9a:
5b:ca:04:35:14:22:9a:fa:ee:87:6d:99:74:19:93:
52:b1:c0:1a:56:63:09:fa:40:c1:21:9a:0a:fe:91:
d9:2e:e1:be:91:f3:cc:03:73:76:f6:5b:78:de:0b:
e1:1a:0c:01:3e:81:70:a1:d7:c4:fe:1a:c4:f1:8c:
af:2c:40:74:dc:86:fe:39:a7:a4:45:95:7a:b7:8f:
13:ec:3c:4f:54:4d:10:1b:c5:e6:da:2b:89:18:5f:
96:a0:09:49:76:80:0d:98:93:ec:63:ba:c8:70:08:
85:08:16:20:9b:df:de:8f:7c:5e:05:fc:3c:f3:8b:
89:0e:2a:85:2c:a9:a1:24:a3:43:05:2c:c8:82:96:
95:fd:4c:09:59:a2:17:4d:b3:ee:0b:4a:fe:f9:6c:
d5:64:01:52:2e:72:5d:1f:78:3b:1a:36:21:6b:34:
dc:d2:fe:d2:3b:f3:c1:23:0f:cb:e9:76:08:13:2f:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EE:76:62:38:1A:AE:F8:98:52:BE:AE:94:CC:05:3F:AB:2F:5A:1A
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/Ae52YjgarviYUr6ulMwFP6svWho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.94.0/24
163.245.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:06:18:00:20:3d:7d:aa:4f:68:d0:c3:1c:94:1d:f6:49:6b:
ea:99:55:06:7d:2c:30:3c:fd:75:d9:8e:d0:fc:68:75:ca:84:
f9:5d:42:a4:0e:ea:f6:66:4a:4e:f2:98:8a:cc:60:60:4d:53:
41:e0:24:66:a2:74:b2:24:c2:9b:7a:ae:31:0e:4a:d9:f2:d6:
1a:78:22:f3:3b:36:3e:a0:fb:cd:ed:64:93:ea:74:a7:f3:21:
c2:1e:82:0d:b2:eb:f2:37:ec:64:30:f2:fe:33:48:e3:0e:af:
b4:14:ca:87:68:b4:d6:09:9e:6d:3a:97:28:09:79:3d:24:ca:
66:18:f0:f2:7b:8a:df:1a:25:2a:3a:d3:c3:8e:11:f0:95:ca:
7a:e4:9d:84:41:0a:74:65:29:ec:c5:c6:b1:39:ed:32:1d:12:
96:29:fc:23:2d:b2:1f:4c:55:d6:41:e4:6b:1d:b2:e8:a8:a2:
e0:58:b6:b0:b4:9a:de:9d:9b:05:e6:85:b9:1b:05:07:7f:1c:
53:e2:70:6b:2b:22:8d:e8:d9:7d:ef:66:e9:14:df:b5:04:01:
33:f2:90:84:84:64:e7:42:91:40:a1:d2:11:1b:05:b8:2d:ca:
79:e1:46:77:62:99:7c:e3:dc:24:69:70:44:cd:dd:87:23:fe:
3c:78:39:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:25:06 2026 by rpki-client